Known vulnerabilities in nginx

Vendor: Fedoraproject
Software: nginx
Software CPE: cpe:2.3:o:fedoraproject:nginx:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 47
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx nginx is affected by 47 known vulnerabilities: 2 critical, 9 high, 34 medium, 2 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137847 - Heap-based Buffer Overflow
CVE-2026-42533		 CWE-122 High
No
No
 1.30.4-1.fc45 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 8 more
#VU137846 - Use of Uninitialized Resource
CVE-2026-60005		 CWE-908 High
No
No
 1.30.4-1.fc45 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 9 more
#VU137845 - Use After Free
CVE-2026-56434		 CWE-416 Medium
No
No
 1.30.4-1.fc45 16.07.2026 SB2026071606
SB20260721112
SB20260721113
and 9 more
#VU134864 - Out-of-bounds read
CVE-2026-48142		 CWE-125 Medium
No
No
 1.30.3-1.fc43, 1.30.3-1.fc44, 1.30.3-1.fc45 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 10 more
#VU134863 - Use After Free
CVE-2026-42530		 CWE-416 High
Available
No
 1.30.3-1.fc43, 1.30.3-1.fc44, 1.30.3-1.fc45 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 2 more
#VU134861 - Heap-based Buffer Overflow
CVE-2026-42055		 CWE-122 High
No
No
 1.30.3-1.fc43, 1.30.3-1.fc44, 1.30.3-1.fc45 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 12 more
#VU132220 - Heap-based Buffer Overflow
CVE-2026-9256		 CWE-122 Critical
Available
No
 1.30.2-1.fc43, 1.30.2-1.fc44 25.05.2026 SB2026052502
SB2026052504
SB2026052505
and 12 more
#VU131379 - Use After Free
CVE-2026-40701		 CWE-416 Medium
No
No
 1.30.1-1.fc42, 1.30.1-1.fc43, 1.30.1-1.fc44 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU131378 - Authentication Bypass by Spoofing
CVE-2026-40460		 CWE-290 Medium
No
No
 1.30.1-1.fc42, 1.30.1-1.fc43, 1.30.1-1.fc44 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 4 more
#VU131377 - Heap-based Buffer Overflow
CVE-2026-42945		 CWE-122 Critical
Available
Exploited
 1.30.1-1.fc42, 1.30.1-1.fc43, 1.30.1-1.fc44 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 26 more
#VU131376 -
CVE-2026-42926		 Medium
No
No
 1.30.1-1.fc42, 1.30.1-1.fc43, 1.30.1-1.fc44 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 1 more
#VU131375 - Uncontrolled Memory Allocation
CVE-2026-42946		 CWE-789 Medium
No
No
 1.30.1-1.fc42, 1.30.1-1.fc43, 1.30.1-1.fc44 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 14 more
#VU131374 - Out-of-bounds read
CVE-2026-42934		 CWE-125 Medium
No
No
 1.30.1-1.fc42, 1.30.1-1.fc43, 1.30.1-1.fc44 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU124482 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-28753		 CWE-93 Medium
No
No
 1.28.3-1.fc44 25.03.2026 SB2026032585
SB20260325200
SB2026041117
and 4 more
#VU124480 - Integer overflow
CVE-2026-27784		 CWE-190 High
No
No
 1.28.3-1.fc44 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124478 - Heap-based Buffer Overflow
CVE-2026-27654		 CWE-122 Medium
Available
No
 1.28.3-1.fc44 25.03.2026 SB2026032585
SB20260325200
SB2026033174
and 17 more
#VU124475 - Out-of-bounds write
CVE-2026-32647		 CWE-787 High
No
No
 1.28.3-1.fc44 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124473 - NULL Pointer Dereference
CVE-2026-27651		 CWE-476 Medium
No
No
 1.28.3-1.fc44 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124470 - Incorrect Authorization
CVE-2026-28755		 CWE-863 Medium
No
No
 1.28.3-1.fc44 25.03.2026 SB2026032585
SB20260325200
SB2026081734
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642		 CWE-349 Medium
No
No
 1.28.2-1.fc42, 1.28.2-1.fc43 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more


Showing elements 1 - 20 out of 47